Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm and the window size is not chosen appropriately. This for example affects use of ElGamal in OpenPGP.

🗓️ 16 Jun 2021 07:00:00Reported by MicrosoftType

Libgcrypt mishandles ElGamal before 1.8.8 and 1.9.x before 1.9.3, enabling a side-channel in OpenPGP due to no exponent blinding and improper window size.

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
Tenable Nessus	Amazon Linux 2 : libgcrypt (ALAS-2022-1769)	6 Apr 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libgcrypt (ALAS-2022-1578)	6 Apr 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libgcrypt (ALSA-2021:4409)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : libgcrypt (CESA-2021:4409)	11 Nov 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libgcrypt (EulerOS-SA-2021-2395)	14 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : libgcrypt (EulerOS-SA-2021-2469)	24 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libgcrypt (EulerOS-SA-2021-2503)	27 Sep 202100:00	–	nessus

Vulners

Node

microsoft cm1_libgcrypt_1.8.7-2Range<1.8.7-2

16 Jun 2021 07:00Current

9.3High risk

Vulners AI Score9.3

CVSS 25

CVSS 3.17.5

EPSS0.00425

SSVC